CVE-2025-64333

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. A large HTTP content type, when logged, can cause a stack overflow, potentially crashing Suricata.

Recommendations Update to Suricata version 7.0.13 or later. Update to Suricata version 8.0.2 or later. As a workaround, limit stream.reassembly.depth to less than half the stack size. Increase the process stack size to reduce the likelihood of the issue triggering.